Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa
File: 3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa (raw, json)
Hash identifier: izBUaUO2z9ohkFXF6YFZz73eI26o3whz84+2oriTROs=
Subject key identifier: F7:23:81:C6:D2:DC:C3:A2:06:C9:4C:1F:06:31:75:15:92:20:13:20
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F43285848E9CBDB773DBA9484ABE24F98
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 64271
IP address blocks: 2604:d6c0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:db:77:3d:ba:94:84:ab:e2:4f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=f26d447b-3c6c-4a72-a06a-1a6b9ba27259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:d8:fb:00:28:51:d4:55:5f:82:96:e9:79:
5d:b3:30:3f:7f:de:bc:ea:98:42:3b:8e:fd:1e:10:
dc:ef:f1:bc:13:5d:57:0a:3b:93:8b:1a:fc:ca:6a:
1c:da:d9:98:a3:8c:4d:1d:79:ce:3f:af:f3:0c:8b:
72:31:ca:03:67:83:f1:d6:47:30:da:1e:72:6c:6a:
17:77:56:8d:d7:43:9c:a4:6b:78:15:49:d2:f0:f1:
b7:19:60:ff:5e:cf:3a:c9:de:7e:54:3b:95:fa:b5:
94:b4:73:d8:a8:47:3d:5d:1b:de:41:4c:56:01:19:
1e:40:b6:c7:7b:1b:df:65:3b:dd:f2:11:eb:ac:17:
96:74:52:bb:d0:87:5b:f6:af:da:9a:a3:5f:a6:c0:
6e:f3:8b:25:02:e4:d5:c0:4e:30:f4:9d:b9:44:31:
b9:65:67:a7:34:4a:49:5b:ce:02:30:c1:81:04:54:
d0:4a:ef:93:2d:78:6f:3a:9e:a5:82:09:9b:49:77:
da:96:e0:13:20:00:14:b9:93:2f:7b:fc:5f:4e:a5:
cc:52:5c:ba:57:a4:dc:4c:be:2e:0a:93:43:99:02:
9a:01:bf:af:b2:ef:c1:35:b2:77:fd:30:1e:26:67:
62:68:bf:0f:e3:12:86:66:fc:97:c6:44:46:a6:fe:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:81:C6:D2:DC:C3:A2:06:C9:4C:1F:06:31:75:15:92:20:13:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:d6c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:6a:11:6b:e6:64:c7:a4:73:9f:3c:4b:c8:0f:50:ce:1a:95:
63:38:db:c1:a0:2a:51:10:1a:41:68:b6:12:06:d7:32:b0:46:
51:97:2c:f8:73:e1:7a:44:6b:b3:4f:9a:5d:cd:4f:ca:99:3c:
43:35:4d:1d:e2:82:6f:d6:2c:a9:ae:24:1c:aa:41:34:e7:7e:
ed:ca:ef:45:b9:fe:10:b7:f2:ef:3c:13:3d:c3:ff:34:1d:79:
7e:ad:8d:9a:1b:53:cf:ee:52:d0:75:f3:56:3a:44:31:1c:c8:
a2:a4:8a:98:72:56:a2:c1:f6:15:94:18:95:bc:32:84:64:75:
02:78:5b:44:b2:1d:3d:fe:48:a2:95:98:0b:46:79:92:f9:46:
b1:ce:f1:4a:a6:ad:90:c2:af:35:4b:90:2a:c7:b8:bf:44:a0:
70:5e:71:dd:2e:1a:05:59:a4:17:d6:61:28:d2:54:07:88:be:
cc:16:a8:cd:e4:93:0d:29:1a:03:5a:8d:96:35:68:3a:61:ab:
02:52:c8:c0:b8:d6:43:a8:ce:8e:ba:22:b2:a3:70:29:54:4d:
b9:f7:61:3e:d6:7d:e4:10:35:8e:49:0b:f4:e0:f7:61:71:71:
11:8d:2e:b7:50:24:eb:e7:80:ef:a7:e4:fa:69:3f:a3:d4:a8:
10:45:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:40:24 2025 by rpki-client